Re: sudo and su support

"Doug Nordwall" <[email protected]>
Newsgroups gmane.comp.security.nessus.general
Message-ID <[email protected]>
ya, in my own case, I'll probably end up running a full scan on a box where
I have sudo on everything and log what commands it needs, then go back and
make a sudo config for those boxes, rather than use the su option.

fortunately, it's largely a non-issue for us... I can work around it :) It
was mostly a question to see if it was in the path or not, as I could
actually see a use for it.

On Tue, May 27, 2008 at 2:53 AM, Jason Haar <[email protected]>
wrote:

> Doug Nordwall wrote:
> > In my own case, there are a fair number of machine that we have where
> > we have a UID 0 account for our access that is a separate account from
> > root, and we don't have "root" :) I realize that this is not a common
> > configuration, so I was asking.
>
> We are in a similar state. Some machines are still out of bounds to me
> because of the requirement for root access - the business/application
> owner just doesn't want to be giving away root access to anyone more
> than is needed. A "sudo" shell option for an unprivileged account would
> work wonders. Via /etc/suoders, they'd be able to "give away root" for
> just the commands needed by Nessus - and not one drop of blood more :-)
>
>
>
> --
> Cheers
>
> Jason Haar
> Information Security Manager, Trimble Navigation Ltd.
> Phone: +64 3 9635 377 Fax: +64 3 9635 417
> PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
>
> _______________________________________________
> Nessus mailing list
> [email protected]
> http://mail.nessus.org/mailman/listinfo/nessus
>



-- 
Doug Nordwall
Unix, Network, and Security Administrator
You mean the vision is subject to low subscription rates?!!? - Scott Stone,
on MMORPGs

_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.